ETSITS 102 822-5 V1.1.1 



(2005-03) 



Technical Specification 



Broadcast and On-line Services: Search, select, and 
rightful use of content on personal storage systems 

('TV^->!l/7yf/>ne Phase 1"); 

Part 5: Rights Management and Protection (RMP) 

Information for Broadcast Applications 



European Broadcasting Union 



/ 




Union Europeenne de Radio-Television 



EBU UER 




ETSI TS 102 822-5 V1.1.1 (2005-03) 



Reference 



DTS/JTC-TVA-PH1-05 
Keywords 



broadcasting, content, system, TV, video 



ETSI 

650 Route des Lucioles 
F-06921 Sophia Antipolis Cedex - FRANCE 

Tel. : +33 4 92 94 42 00 Fax: +33 4 93 65 47 1 6 

Siret N ° 348 623 562 0001 7 - NAF 742 C 
Association a but non lucratif enregistree a la 
Sous-Prefecture de Grasse (06) N° 7803/88 



Important notice 



Individual copies of the present document can be downloaded from: 
http://www.etsi.orq 

The present document may be made available in more than one electronic version or in print. In any case of existing or 

perceived difference in contents between such versions, the reference version is the Portable Document Format (PDF). 

In case of dispute, the reference shall be the printing on ETSI printers of the PDF version kept on a specific network drive 

within ETSI Secretariat. 

Users of the present document should be aware that the document may be subject to revision or change of status. 

Information on the current status of this and other ETSI documents is available at 

http://portal.etsi.org/tb/status/status.asp 

If you find errors in the present document, please send your comment to one of the following services: 

http://portal.etsi.orq/chaircor/ETSI support.asp 

Copyright Notification 

No part may be reproduced except as authorized by written permission. 
The copyright and the foregoing restriction extend to reproduction in all media. 

© European Telecommunications Standards Institute 2005. 

© European Broadcasting Union 2005. 

All rights reserved. 

DECT™, PLUGTESTS"^" and UMTS™ are Trade Marks of ETSI registered for the benefit of its IVIembers. 
TIPHON^'^ and the TIPHON logo are Trade Marks currently being registered by ETSI for the benefit of its Members. 
2QppTM |g g jracle Mark of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. 



ETSI 



ETSI TS 102 822-5 V1.1.1 (2005-03) 



Contents 



Intellectual Property Rights 4 

Foreword 4 

Introduction 4 

1 Scope 6 

2 References 6 

3 Definitions and abbreviations 6 

3.1 Definitions 6 

3.2 Abbreviations 7 

4 Design principles and requirements 7 

4.1 Positive assertion of rights 7 

4.2 Operational approach 7 

4.3 Compliance 8 

5 RMPI - Micro Broadcast and RMPI - Micro semantics 8 

5.1 Principals 8 

5.2 Rights 8 

5.3 Conditions 10 

5.4 Ancillary RMPI-MB and ancillary RMPI-M 12 

6 Syntax and encoding for RMPI-MB and RMPI-M 13 

6.1 Introduction 13 

6.2 RMPI-MB and RMPl-M payload 13 

6.3 Ancillary RMPI 14 

6.4 Rights 15 

6.5 Conditions and identifiers 16 

7 RMPI-MB and RMPI-M lifecycle 19 

Annex A (informative): XML Expression of RMPI MB and M 21 

Annex B (informative) : Bibliography 24 

History 27 



£75/ 



ETSI TS 102 822-5 V1.1.1 (2005-03) 



Intellectual Property Rights 



IPRs essential or potentially essential to the present document may have been declared to ETSI. The information 
pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found 
in ETSI SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in 
respect of ETSI standards", which is available from the ETSI Secretariat. Latest updates are available on the ETSI Web 
server ( http://webapp.etsi.org/IPR/home.asp ). 

Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee 
can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web 
server) which are, or may be, or may become, essential to the present document. 



Foreword 

This Technical Specification (TS) has been produced by Joint Technical Committee (JTC) Broadcast of the European 
Broadcasting Union (EBU), Comite Europeen de Normalisation ELECtrotechnique (CENELEC) and the European 
Telecommunications Standards Institute (ETSI). 

The present document is part 5 of a multi-part deliverable covering Broadcast and On-line Services: Search, select, and 
rightful use of content on personal storage systems {"TV-Anytime Phase 1"), as identified below: 

Part 1: "Phase 1 Benchmark Features"; 

Part 2: "System description"; 

Part 3: "Metadata"; 

Part 4: "Content referencing" ; 

Part 5: "Rights Management and Protection (RMP) Information for Broadcast Applications"; 

Part 6: "Delivery of metadata over a bi-directional network"; 

Part 7: "Bi-directional metadata delivery protection" . 



Introduction 



The present document is based on a submission by the TV-Anytime forum ( http://www.tv-anvtime.org) . 

The present document specifies the minimum set of usage rules and conditions required to enable protection of 
broadcast digital television content within a TVA Rights Management and Protection (RMP) compliant domain. When 
associated with a broadcast signal, RMP Information (RMPI) for Broadcast Applications is called RMPI-Micro 
Broadcast (RMPI-MB). When associated with content present in a TVA RMP compliant domain (post 
broadcast/acquisition) it is called RMPI-Micro (RMPI-M). 

RMPI for Broadcast Applications can be used in conjunction with both free-to-air broadcasts and broadcasts protected 
by CA or DRM systems. 
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Figure 1 : RMPI in the broadcast environment 

In figure 1, transfer of content from one RMP domain to another is not regulated by the RMPI-M/MB but the use of this 
content is. 

"TV-Anytime Phase 1 " (TV A Phase 1) is the first full and synchronized set of specifications established by the 
TV-Anytime Forum. TVA Phase 1 features enable the search, selection, acquisition and rightful use of content on local 
and/or remote personal storage systems from both broadcast and online services. 

The features are supported and enabled by the specifications for Metadata, Content Referencing, Rights Management 
and Bi-directional Metadata Delivery Protection, TS 102 822-3 [2], TS 102 822-4 [3], TS 102 822-5 (the present 
document), TS 102 822-6 [4] and TS 102 822-7 [5] respectively. All Phase 1 Features Hsted in TS 102 822-1 [1] are 
enabled by the normative TV-Anytime tools specifications. This list of Phase 1 Features is to be used as guidance to 
manufacturers, service providers and content providers regarding the implementation of the Phase 1 TV-Anytime 
specifications. 

There will be further TV-Anytime phases published and Business Models for Post-Phase 1 are currently being defined to 
include Private and public domains, portable recordable media, super distribution (legal sharing of content between 
consumers), peripheral device support and mobile devices, amongst others. 
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Scope 



RMPI for Broadcast Applications, made up of RMPI-Micro Broadcast and RMPI-Micro, is a component of the 
TV-Anytime Rights Management and Protection system suite of specifications. 

The present document provides the semantics, syntax and encoding for the usage rights, controls and permissions to be 
conveyed in RMPI-MB and RMPI-M. 



References 



The following documents contain provisions which, through reference in this text, constitute provisions of the present 
document. 

• References are either specific (identified by date of publication and/or edition number or version number) or 
non-specific. 

• For a specific reference, subsequent revisions do not apply. 

• For a non-specific reference, the latest version applies. 

Referenced documents which are not found to be publicly available in the expected location might be found at 
http://docbox.etsi.org/Reference . 

[1] ETSI TS 102 822-1: "Broadcast and On-line Services: Search, select, and rightful use of content 

on personal storage systems ("TV-Anytime Phase 1"); Part 1: Phase 1 Benchmark Features". 

[2] ETSI TS 102 822-3 (all subparts): "Broadcast and On-line Services: Search, select, and rightful 

use of content on personal storage systems ("TV-Anytime Phase 1"); Part 3: Metadata; Sub-part 1: 
Metadata schemas; Sub-part 2: System aspects in a uni -directional environment". 

[3] ETSI TS 102 822-4: "Broadcast and On-line Services: Search, select, and rightful use of content 

on personal storage systems ("TV-Anytime Phase 1"); Part 4: Content Referencing". 

[4] ETSI TS 102 822-6 (all subparts): "Broadcast and On-line Services: Search, select, and rightful 

use of content on personal storage systems ("TV-Anytime Phase 1 "); Part 6: Delivery of metadata 
over a bi-directional network; Sub-part 1: Service and transport; Sub-part 2: Service discovery". 

[5] ETSI TS 102 822-7: "Broadcast and On-line Services: Search, select, and rightful use of content 

on personal storage systems ("TV-Anytime Phase 1"); Part 7: Bi-directional metadata delivery 
protection". 



3 Definitions and abbreviations 

3.1 Definitions 

For the purposes of the present document, the following terms and definitions apply: 

compliance body: legal entity that adopts the specification and enforces a compliance regime 

conditions: limitations on rights 

grant: combination of one principal, one or more rights and zero or more conditions 

principals: entities that perform actions 

rights: actions that can be performed using a given piece of content 
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RMP-domain: set of TVA RMP-compliant devices that are securely bound to each other for the purpose of 
exchanging protected content 

NOTE: It is an instance of a principal. The rules for creating and managing domains are outside the scope of the 
present document. 

3.2 Abbreviations 

For the purposes of the present document, the following abbreviations apply: 

AES Advanced Encryption Standard 

bslbf bit string left bit first 

CA Conditional Access 

CCI Copy Control Information 

CSA Common Scrambling Algorithm 

DRM Digital Rights Management 

DVB The Digital Video Broadcasting Project 

HD High Definition 

HDCP High bandwidth Digital Content Protection system 

HDMI High Definition Multimedia Interface 

M2 Multi-2 encryption algorithm 

RMP Rights Management and Protection 

RMPI Rights Management and Protection Information 

RMPI-M Rights Management and Protection Information Micro 

RMPI-MB Rights Management and Protection Information Micro for Broadcast 

SD Standard Definition 

TVA TV-Anytime 

uimsbf unsigned integer most significant bit first 

VCR Video Cassette Recorder 



4 Design principles and requirements 

4.1 Positive assertion of rights 

In TV-Anytime RMPI-MB rights are positively asserted and never implied. These rights are granted to the RMP System 
and not to a person. When a right is exercised, asserted conditions are validated. If those asserted conditions are not met 
then the right cannot be exercised, e.g. a user could hit pause without asking for permission, however hitting play after 
pause would cause the conditions to be validated and the rights to be acquired. If conditions are not asserted, then they 
do not constrain the rights. 



4.2 Operational approach 



The RMPI-MB and RMPI-M focus on the usage of content as opposed to the movement of content. As a consequence 
there is no notion of copy within the secure RMP-compliant domain as only those principals that have been granted 
rights to use the content are given access to the content under the conditions expressed in RMPI-MB and RMPI-M. 

Usage of the content under the protection of the RMP system is explicitly defined and regulated. In the event that the 
broadcaster wishes to allow the content to leave the protection of the RMP system it is expressible with RMPI-MB and 
RMPI-M as an Export with appropriate conditions. One significant reason to permit this is to allow content to be 
consumed on legacy devices. 
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4.3 Compliance 



TV-Anytime RMP does not mandate specific implementations or compliance and robustness rules. There are certain 
parameters in the specification that are left for assignment by the compliance bodies; for example geographic control, 
RMP domain identifier, single point of control identifier and security level. It is anticipated that compliance bodies that 
adopt the specification will define implementation requirements and associated compliance regimes to meet the needs 
of their respective environments. Compliance bodies may even choose an alternative encoding for RMPI-M or MB 
(e.g. XML expression given in annex A). 



5 RMPI - Micro Broadcast and RIVIPI - IVIicro semantics 

5.1 Principals 

Table 1 gives the Principals that can be used by a broadcaster when granting rights with RMPI-MB and RMPI-M. 

Table 1 : Principals being used by broadcasters 



Principal 


Definition 


Receiving Domain 


The receiving domain is the first TVA RIVIP-compliant domain that receives the content and 
associated RMPI-MB via broadcast. Once the content is in the domain, the receiving domain 
is explicitly identified. 


Any Domain 


Any TVA RMP-compliant domain that can respond to the usage conditions stated within 
RMPI-MB and RMPI-M. 



5.2 



Rights 



The set of rights listed in table 2, depending on their applied conditions, can be used to enable users to access content 
via a range of devices under a variety of different usage models. Note that terms PLAY and EXPORT below can both 
be used to enable content viewing, but under different consumption environments or constraints. 
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Table 2: Rights 



Right 


Description 


Play 


"Play" Is the right to derive a transient and directly perceivable representation of content within 

the TVA RIVIP domain. 

NOTE: If the device that creates the human perceptible rendition of the content is not a TVA 
BMP device (e.g. an analogue television set), then this right is not applicable. In that 
case the appropriate right is required (see Analogue Export, Digital Export SD and 
Digital Export HD). 


Analogue Export 


"Analogue export" is the right to create a user accessible analogue signal representing the 

content as an output, and thus outside of the TVA RIVIP system. An example of an analogue 

export would be sending the content over S-Video to a VCR or TV. 

NOTE: Until such time as there are more display devices that are directly under the control of 
RMP systems, the broadcaster is encouraged to allow analogue export with 
appropriate conditions or consumers will be unable to use their legacy analogue 
systems to create a viewable version of the programme. 


Digital Export 
Standard Definition 
(SD) 


"Digital Export Standard Definition" is the right to create a Standard Definition digital signal 
representing the content as an output outside of the TVA RMP system. An example of a Digital 
Export SD would be sending the content over a legacy digital output to a display or recorder with 
a standard definition digital input. 
NOTE: If the consumer has digital devices outside the scope of the TVA RMP system, this 

right with appropriate conditions must be granted for those devices to be able to 

receive the content. 


Digital Export High 
Definition (HD) 


"Digital Export High Definition" is the right to create a High Definition digital signal representing 
the content as an output outside of the TVA RMP system. An example of a Digital Export HD 
would be sending the content over a legacy digital output to a display or recorder with a high 
definition digital input. 
NOTE 1 : If the consumer has digital devices outside the scope of the TVA RMP system, this 

right with appropriate conditions must be granted for those devices to be able to 

receive the content. 
NOTE 2: If both the Digital Export SD and Digital Export HD rights are granted, this is known as 

the Digital Export Any Definition Right. This means that any definition/resolution are 

permitted for digital export. 
NOTE 3: It is the compliance body that establishes which resolutions are HD and which ones 

are not. 


Extend Rights 


This right allows the RMP System to apply additional rights to the content. The absence of this 

right means that only the originally transmitted rights may be applied. 

NOTE: Conditions to this right include at most one identified source for those additional rights. 
In the case that no condition is present with the right, then the RMP System 
implementation is permitted to extend rights based upon conditions specified by the 
compliance body. 
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5.3 



Conditions 



Table 3 gives the Conditions that can be used by a broadcaster when granting rights with RMPI-MB and RMPI-M. 

Table 3: Conditions 



Condition 


Description 


Rigtits to which condition is 
applicable 


Geographical Control 


This condition limits the use of a right to within 
one or more specified territories. The granularity 
of territoriality is to be defined by the compliance 
body. 

NOTE: The present document assumes that 
devices belong to a territory 
regardless of where they are 
physically located. 


Play, Analogue Export, Digital Export 
SD, Digital Export HD 
This condition is expressed once and 
applies to all of these rights. 


Single Point of Control 


The purpose of this condition is to allow for 
implementation of device-bound rights within the 
TVA RMP domain. 

If present in the broadcast this means that the 
broadcaster intends that once the content enters 
the TVA RIVIP domain, only one RMP entity can 
make usage decisions about the content based 
upon the expressed RMPI-MB. 
Upon reception a received instance of content is 
now married to a specific RMP entity and that 
entity can no longer be changed. The entity is 
then characterized by its identifier. 


Play, Analogue Export, Digital Export 

SD, Digital export HD 

Only valid for the Receiving Domain 

principal. 

This condition is expressed once and 

applies to all of these rights. 


Physical Proximity 


This condition limits the use of a right to RMP 
compliant devices within close physical proximity 
of the receiver that first received the broadcast 
content. Close physical proximity is provisionally 
defined as immediate vicinity e.g. limited to the 
home network on the same local area network 
and is not permitted to be transmitted over a 
wide area network. 


Play, Analogue Export, Digital Export 

SD, Digital Export HD 

Only valid for the Receiving Domain 

principal. 

This condition is expressed once and 

applies to all of these rights. 


Buffer Duration 


This condition limits the use of a right in such a 
way that each frame of broadcast content is used 
only within a specified duration after that frame 
was broadcast. For instance, if a buffer duration 
condition of 10 minutes were applied to the right 
to play content broadcast taking place from 8:00 
to 9:00, the content broadcast at 8:00 would be 
playable until 8:10, the content broadcast at 8:25 
would be playable until 8:35, and the content 
broadcast at 9:00 would be playable until 9:10. If 
a buffer duration condition of were applied to 
the right to play content broadcast from 8:00 to 
9:00, the content would be only immediately 
viewable, with no trick play allowed. 


Play, Analogue Export, Digital Export 

SD, Digital Export HD 

This condition is expressed once and 

applies to all of these rights. 

Excludes Expiration Date 

NOTE: This condition is to be 

evaluated continually at a 
frequency to be defined by 
the compliance body or the 
implementer, and when the 
condition is no longer met, 
the right is no longer granted. 


Time Window Start Date 
and Time Window End 
Date 


These conditions define the window of time 
during which the rights are granted. It is defined 
as absolute start time and absolute expiry time. 


Play, Analogue Export, Digital Export 

SD, Digital Export HD 

These conditions are expressed once 

and apply to all of these rights. 

They do not refer to the Extend Rights. 

Excludes Buffer Duration. 
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Condition 


Description 


Riglits to whicli condition is 
applicable 


Standard Definition Digital 
Export Control 


This condition forwards content management 
rules to external content protection systems on 
standard definition outputs whilst exercising the 
Digital Export SD right: 
for immediate viewing only 
bound to device or media for future viewing. 
If the content is marked "for immediate viewing 
only", then the external content protection 
system should treat it as "do not store". 
If the content is marked "bound to device or 
media for future viewing", then the external 
content protection system is instructed to permit 
the storage of the content as long as the 
playback of that content is in the presence of the 
single device or media to which it was exported. 
The content can be viewed as well as recorded 
or stored. 
NOTE: This expression may be used to 

enable HDCP on an HDMI output. CCI 
bits can be used to signal this 
information as follows: copy no more 
for immediate viewing only, copy one 
generation for bound to device or 
media for future viewing, and copy 
control not asserted if the condition is 
not present. 


Digital Export SD 

This condition applies both to the Digital 
Export Standard Definition Right and 
the Digital Export Any Definition Right. 
NOTE: If the Digital Export Any 

Definition Right is exercised, 
then the most restrictive of 
either SD or HD digital export 
control is used. 


High Definition Digital 
Export Control 


This condition forwards content management 
rules to external content protection systems on 
high definition outputs whilst exercising the 
Digital Export HD right: 
for immediate viewing only 
bound to device or media for future viewing. 
If the content is marked "for immediate viewing 
only", then the external content protection 
system should treat it as "do not store". 
If the content is marked bound to device or 
media for future viewing, then the external 
content protection system is instructed to permit 
the storage of the content as long as the 
playback of that content is in the presence of that 
single device or media to which it was exported. 
The content can be viewed as well as recorded 
or stored. 
NOTE: This expression may be used to 

enable HDCP on an HDMI output. CCI 
bits can be used to signal this 
information as follows: copy no more 
for immediate viewing only, copy one 
generation for bound to device or 
media for future viewing, and copy 
control not asserted if the condition is 
not present. 


Digital Export HD 

NOTE: If Digital Export Any 

Definition Right is exercised, 
then the most restrictive of 
either SD or HD digital export 
control is used. 


Analogue Export 
Signalling 


This condition forwards content management 
rules to external content protection systems: 
for immediate viewing only 
bound to device or media for future viewing 
(includes immediate viewing). 


Analogue Export 


Analogue Standard 
Definition (SD) control 


This condition constrains the resolution of the 
exported analogue signal. If set then Standard 
Definition resolution only is permitted for an 
analogue output. 


Analogue Export 


Security Level 


This condition constrains the execution of rights 
based on the invoked components" robustness 
level. Security levels are to be based upon the 
aggregate robustness of ail invoked components 
needed to exercise a right. 


Play, Analogue Export, Digital Export 
SD, Digital Export HD, Extend Rights 
Each grant may have a specific security 
level. 
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Condition 


Description 


Riglits to whicli condition is 
applicable 


Simultaneous Rendering 
Count 


This condition limits the number of simultaneous 
Plays, Analogue Exports and Digital Exports of 
content within a domain. For purposes of this 
condition a Play counts as a rendering, an 
Analogue Export counts as a rendering, a Digital 
Export SD counts as a rendering and a Digital 
Export HD counts as a rendering. 
NOTE: It is expected that this condition will be 
used in conjunction with the Single 
Point of Control condition. However 
there may be implementations 
whereby Simultaneous Rendering 
Count is used on its own (e.g. there 
may be a secure simultaneous render 
counter service available within the 
domain). 


Play, Analogue Export, Digital Export 

SD, Digital Export HD 

Only valid if principal is Receiving 

Domain 

This condition is being expressed once 

and applies to all of these rights. 


Source of additional rights 


This condition identifies the authority which may 
assign new rights to the content. 


Extend Rights 



5.4 Ancillary RMPI-MB and ancillary RIVIPI-M 

Ancillary RMPI-MB and ancillary RMPI-M (table 4) do not convey usage rules or conditions, but carry further 
information that is required when handling the content. 

Table 4: Ancillary RMPI-MB and ancillary RMPI-M 



Ancillary RMPI-MB and ancillary RMPI-M 


Information to be conveyed 


Intent 


Scrambling Control 


No scrambling 

Maintain broadcast scrambling 

Apply RMP cipher 


This is to control the scrambling of 

content when it enters and is 

stored in the RMP controlled 

domain. 

Content is not to be scrambled 

when stored in the RMP 

controlled domain. However it 

may be scrambled when 

transmitted between devices or 

when bound to removable media. 

Self explanatory, do not add RMP 

cipher. 

Remove broadcast scrambling if 

any and apply RMP cipher. 


Cipher algorithm 


AES 

Camellia 

DVB Common Scrambling Algorithm 

v1 

DVB Common Scrambling Algorithm 

v2 

3DES 

M2 

Cipher outside of the control of 

TV-Anytime RMP 


To specify the cipher algorithm 
used to (de)scramble the content 
within the TVA RMP Domain. 


Version of RIVIPI 


Version of RMPI specification 


To identify version of RMPI 
specification. 


Origin of RMPI 


Identifier/pointer to authority having 
granted rights 


For forensic purposes; this is not 
to authenticate the origin. 
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6 Syntax and encoding for RMPI-MB and RMPI-M 

6.1 Introduction 

The syntax and encoding for the RMPI-MB and RMPI-M payload is given below. The payload describes the minimum 
set of usage rights and rules that can be conveyed alongside a digital television broadcast. It is composed of at most four 
grants including: 

• A grant for the "Receiving Domain" that signals the rights and conditions that apply to content once it has 
entered a given "Receiving Domain". This grant excludes the "Extend Rights" right. 

• A grant for "Any Domain" that signals the rights and conditions that apply to content once it has entered "Any 
Domain". This grant excludes the "Extend Rights" right. 

• A grant for the "Receiving Domain" that signals the "Extend Rights" right and associated conditions. 

• A grant for "Any Domain" that signals the "Extend Rights" right and associated conditions. 

The last two grants are always identical and therefore share the same encoding. 

The encoding of the payload allows for the signalling of all relevant conditions for each of the rights expressed in each 
respective grant. The encoding also allows signalling that no rights have been granted by assigning null values to the 
respective rights flags. For example, a broadcaster to signal that rights were granted to a "Receiving Domain", and not 
to "Any Domain", then "Any Domain" rights flags would be set to null. The result of this would be that only those 
devices in the "Receiving Domain" would have access to the content based on the grants, unless the "Extend Rights" 
right provided for the acquisition of additional rights. 

The present document does not address binding of RMPI-MB and RMPI-M to content, nor does it define rules for 
conveying a multiplicity of grants within a broadcast stream. However the payload data structure has been defined with 
processing efficiency in mind. Should an implementer or compliance body choose to signal a multiplicity of RMPI-MB 
(for example to support a variety of conditions within a large set of geographic territories), it is recommended that the 
binding to content allows for fast identification of relevant RMPI-MB by the receiver. 

6.2 RIVIPI-IVIB and RIVIPI-IVI payload 

Table 5 describes the fixed encoding of RMPI-MB and RMPI-M. 
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Table 5: RMPI-MB and RMPI-M codes 



Syntax 


No. of bits 


Identifier 


RMPI_MB_and_RMPI_M_paYload (){ 






Ancillary RMPI 






RMPI_type_flag 


1 


bslbf 


Version_of_RMPI 


15 


bslbf 


Origin_of_RMPI 


128 


bslbf 


Scrambling_control 


1 


bslbf 


Cipher 


4 


bslbf 


Extend Rights (Grant is common to Receiving 






Domain and Any Domain) 






Extend_rights_f lag 


1 


bslbf 


Security_level 


2 


uimsbf 


Source_of_additional_rights 


128 


bslbf 


Grant to Receiving Domain 






Domain_ID 


128 


bslbf 


Play_Right_flag 


1 


bslbf 


Analogue_export_right_f lag 


1 


bslbf 


Digit al_export_SD_right_f lag 


1 


bslbf 


Digit al_export_HD_right_f lag 


1 


bslbf 


Buf f er_duration 


2 


bslbf 


Security_level 


2 


uimsbf 


Time_window_start_date 


16 


uimsbf 


Time_window_end_date 


16 


uimsbf 


Geographic_control 


128 


bslbf 


Ana logue_export_signal ling 


2 


bslbf 


Analogue_SD_control 


1 


bslbf 


Standard_Def inition_digital_export_control 


2 


bslbf 


High_Def inition_digital_export_control 


2 


bslbf 


Reserved_f or_f uture_use 


1 


bslbf 


Single_point_of_control_f lag 


1 


bslbf 


Physical_proximity_f lag 


1 


bslbf 


Simultaneous_rendering_count 


4 


uimsbf 


Reserved_f or_f uture_use 


2 


bslbf 


Single_point_of_control_ID 


128 


bslbf 


Grant to Any Domain 






Play_Right_f lag 


1 


bslbf 


Anal ogue_export_right_f lag 


1 


bslbf 


Digit al_export_SD_right_f lag 


1 


bslbf 


Digit al_export_HD_right_f lag 


1 


bslbf 


Buf f er_duration 


2 


bslbf 


Security_level 


2 


uimsbf 


Time_window_start_date 


16 


uimsbf 


Time_window_end_date 


16 


uimsbf 


Geographic_control 


128 


bslbf 


Ana logue_export_signal ling 


2 


bslbf 


Analogue_SD_control 


1 


bslbf 


Standard_Def inition_digital_export_control 


2 


bslbf 


High_Def inition_digital_export_control 


2 


bslbf 


Reserved_f or_f uture_use 

} 


1 


bslbf 



6.3 Ancillary RMPI 



RMPI_type_flag: This 1-bit field indicates the type of RMPI carried (table 6). 

Table 6: RMPI_type_flag 



Value 


Meaning 





RMPI-Micro Broadcast (RMPI-MB) 


1 


RMPl-Micro (RMPI-M) 



Version_of_RMPI: This 15-bit field is used to identify the version of RMPI for future-proofing purposes. 15 bits for 
version to be allocated by compliance body. 
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Origin_of_RMPI: This 128-bit field is used to identify the entity that originated the RMPI. 128 bits to be allocated by 
compliance body. 

Scrambling_control: This 1-bit field indicates the scrambling policy to implement (table 7). 

Table 7: scramblingcontrol 



Value 


Meaning for RMPI-MB 


Meaning for RMPI-M 





Maintain original scrambling status, including no 

scrambling. 

"cipher" field: cipher used in the broadcast. 


Original scrambling status has been maintained, 

including no scrambling. 

"cipher" field: cipher currently used on the content. 


1 


Change scrambling including replacing scrambling 

"cipher" field: cipher to be used to scramble the 

content. 

It is assumed that the broadcast receiver knows 

which scrambling algorithm is used to protect the 

broadcast signal (e.g. DVB CSA for DVB receivers). 


The original scrambling has been changed, 
"cipher" field: cipher currently used on the content. 



Cipher: This 4-bit field specifies the cipher algorithm used to (de)scramble the content in the TVA RMP compliant 
domain (table 8). 

Table 8: Cipher 



Value 


Meaning 


0x0 


No cipher. 


0x1 


AES. 


0x2 


Camellia. 


0x3 


DVB CSA 1 . 


0x4 


DVB CSA 2. 


0x5 


3DES. 


0x6 


M2. 


0x7 


Scrambling/descrambling outside of the control of RMP. 


0x8 to OxF 


Reserved. 



NOTE 1: If the accompanying scrambling_control field is set to 1, then only "No Cipher" (value 0x0), AES (value 
0x1), Camellia (value 0x2) and "Scrambling/descrambling outside of the control of RMP" (value 0x7) can 
be employed. Values 0x0, 0x1, 0x2 indicate that content is descrambled and rescrambled using the 
appropriate cipher. Value 0x7 indicates that a custom cipher or super-scrambling is to be used. 

NOTE 2 (informative): Value 0x7 "Scrambling/descrambling outside of the control of RMP" includes super- 
scrambling whereby additional scrambling is applied to the already scrambled broadcast content at the 
time of entering the RMP Domain. It can be used in conjunction with "Single_Point_of_Control_ID" to 
determine the entity which is responsible for descrambling. 

6.4 Rights 

Extend_rights_flag: This 1-bit field indicates whether the Extend Rights right is granted (table 9). 

Table 9: extend_rights_flag 



Value 


Meaning 





Extend Rights right is not granted. 


1 


Extend Rights right is granted. 
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Play_right_flag: This 1-bit field indicates whether the Play right is granted (table 10). 

Table 10: play_right_flag 



Value 


Meaning 





Play right is not granted. 


1 


Play right is granted. 



Analogue_export_right_flag: This 1-bit field indicates whether the Analogue Export right is granted (table 1 1). 

Table 11: analogue_export_right_flag 



Value 


Meaning 





Analogue Export right is not granted. 


1 


Analogue Export right is granted. 



Digital_export_SD_right_flag: This 1-bit field indicates whether the Digital Export SD right is granted (table 12). 

Table 12: digital_export_SD_right_flag 



Value 


Meaning 





Digital Export SD right is not granted. 


1 


Digital Export SD right is granted. 



Digital_export_HD_right_flag: This 1-bit field indicates whether the Digital Export HD right is granted (table 13). 

Table 13: digital_export_HD_right_flag 



Value 


Meaning 





Digital Export HD right is not granted. 


1 


Digital Export HD right is granted. 



NOTE: If both the Digital Export SD and Digital Export HD rights are granted, then Digital Export is permitted 
for any definition/resolution. This is called the "Digital Export Any Resolution right". 

6.5 Conditions and identifiers 

Unless otherwise stated, conditions apply to Play, Analogue Export, Digital Export SD and Digital Export HD. If 
conditions are not asserted they do not apply. 

Securityjevel: This 2-bit field indicates the minimum security level required to exercise the right. Security levels are 
to be defined by the compliance body. 

NOTE 1 : Security levels should be based upon the aggregate robustness of all invoked RMP components required 
to exercise the right. 

NOTE 2: This condition applies to all rights, including extend rights. 

Source_of_additional_rights: This 128-bit field identifies the entity from whom new rights can be assigned to the 
content. 128-bit identifier to be allocated by compliance body. 

NOTE 3: This condition only applies to Extend Rights. 

DomainJD: This 128-bit field identifies the RMP Domain to which the rights are granted. It is the first domain that 
has received the broadcast signal. 128-bit identifier to be allocated by compliance body. 

NOTE 4: If the RMPl_type_flag is set to then this field is not applicable. 
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Buffer_duration: This 2-bit field limits the use of a right in such a way that each frame of broadcast content is used 
only within a specified duration after that frame was broadcast (table 14). Buffer_duration is valid only if both 
Time_window_start_date and Time_window_end_date are not asserted. 

Table 14: Buffer duration 



Value 


Meaning 


00 


Condition not asserted. 


01 


Condition not asserted. 


10 


Condition set, no buffer (immediate viewing) 


11 


Condition set, buffer duration is a reasonable period of time to 
be determined by compliance body (e.g. 90 minutes). 



Time_window_start_date: This 16-bit field defines the start date of the window of time during which the rights are 
granted. It is defined as absolute start time. It is expressed in number of days since January P'^, 2004. A value of 0x0000 
means that the condition is not asserted (there is no start date). 

Time_window_end_date: This 16-bit field defines the end date of the window of time during which the rights are 
granted. It is defined as absolute expiry time. It is expressed in number of days since January P', 2004. A value of 
OxFFFF means that the condition is not asserted (unbounded end date). 

Geographic_control: This 128-bit field is used to indicate geographical regions and territories for which the rights are 
valid. It is to be defined by the compliance body. 

NOTE 5: It is suggested that the compliance body could use these bits for signalling up to four territories in the 
following format: 2 bytes ISO country code and 2 bytes region within the country. Alternatively the 
compliance body could decide to specify territories for which the rights are not granted. A value should 
be reserved for "condition not asserted". 

Analogue_export_signalling: This 2-bit field is used to signal content management rules to an external analogue 
content protection systems (table 15). 

Table 15: analogue_export_slgnalllng 



Value 


Meaning 


00 


Condition not asserted. 


01 


Condition not asserted. 


10 


For immediate viewing only. 


11 


Bound to device or media for future viewing, does not preclude 
immediate viewing. 



NOTE 6: This condition applies only to the Analogue Export right. 
Analogue_SD_coiitrol: This 1-bit field constrains the resolution of the exported analogue signal (table 16). 

Table 16: analogue_SD_control 



Value 


Meaning 





Condition not asserted. 


1 


While doing analogue output Standard Definition resolution 
only is permitted. 



NOTE 7: This condition applies only to the Analogue Export Right. 

Standard_Definition_digital_export_control: This 2-bit field is to control the configuration of Standard Definition 
digital outputs as to whether the content can be recorded or only viewed immediately (table 17). This condition applies 
only to the Digital Export SD Right. 
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Table 17: standard_definition_digital_export_control 



Value 


Meaning 


00 


Export conditions not asserted. Hand-off to any non-RIVIP 
content protection system is permitted. 


01 


Export conditions asserted. Hand-off to compliance body 
certified non-RIVIP content protection system only is permitted. 
RIVIPI-MB/M is mapped to certified system as defined by 
compliance body. 


10 


Export conditions asserted, bound to device or media for 
immediate viewing, includes immediate viewing. Hand-off to 
compliance body certified non-RMP content protection system 
only is permitted. 


11 


Export conditions asserted, immediate viewing only. Hand-off 
to compliance body certified non-RIVIP content protection 
system only is permitted. 



NOTE 8: This is not signalling digital copy control in the RMP domain, it is only relevant to the Digital Export 
Standard Definition right and external content protection systems such as HDCP. 

High_Definition_digital_export_control: This 2-bit field is to control the configuration of High Definition digital 
outputs as to whether the content can be recorded or only viewed immediately (table 18). This condition applies only to 
the Digital Export HD right. 

Table 18: high_definition_digital_export_control 



Value 


Meaning 


00 


Export conditions not asserted. Hand-off to any non-RIVIP 
content protection system is permitted. 


01 


Export conditions asserted. Hand-off to compliance body 
certified non-RMP content protection system only is permitted. 
RIVIPI-MB/IVI is mapped to certified system as defined by 
compliance body. 


10 


Export conditions asserted, bound to device or media for 
immediate viewing, includes immediate viewing. Hand-off to 
compliance body certified non-RMP content protection system 
only is permitted. 


11 


Export conditions asserted, immediate viewing only. Hand-off 
to compliance body certified non-RMP content protection 
system only is permitted. 



NOTE 9: This is not signalling digital copy control in the RMP domain, it is only relevant to Digital Export High 
Definition right and external content protection systems such as HDCP. 

NOTE 10:If the Digital Export Any Definition Right is exercised, then the most restrictive of either Standard 
Definition or High Definition digital export control is used. 

Single_point_of_control_flag: This 1-bit field indicates that the broadcaster intends that once the content gets into the 
RMP Receiving Domain only one RMP entity can make usage decisions about the content based upon the expressed 
RMPI-MB (table 19). The content is irrevocably married to the device identified as single point of control, if that device 
is destroyed or lost, then this grant becomes no longer exercisable. Single point of control is only used in the context of 
Receiving Domain as principal. 

Table 19: single_point_of_control_flag 



Value 


Meaning 





Condition not asserted. 


1 


Single point of control applies. 
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Physical_proxiinity_flag: This 1-bit field limits the use of a right to RMP compliant devices within close physical 
proximity of the receiver that first received the broadcast content (table 20). When a device checks that condition, it 
needs to be in close physical proximity of the receiving device in order to exercise the right. Precise definition of close 
physical proximity is to be determined by compliance body. The compliance body may decide to limit the use of this 
condition to live broadcasts. For instance close physical proximity could be defined as immediate vicinity e.g. content 
use is limited to the home network on the same local area network and is not permitted to be transmitted over a wide 
area network. Physical proximity is only used in the context of Receiving Domain as principal. 

Table 20: physical_proximity_flag 



Value 


Meaning 





Condition not asserted. 


1 


Physical proximity applies. 



Simultaneous_rendering_count: This 4-bit field limits the number of simultaneous independent Plays, Analogue 
Exports, Digital Export SDs and Digital Export HDs of content within a domain (table 21). For purposes of this 
condition a Play counts as a rendering, an Analogue Export counts as a rendering, a Digital Export SD counts as a 
rendering, and a Digital Export HD counts as one rendering. Simultaneous rendering count is only used in the context of 
Receiving Domain as principal. 

Table 21 : simultaneous_rendering_count 



Value 


Meaning 





Condition not asserted. 


1 to 15 


IVIaximum permitted number of simultaneous renderings. 



Single_point_of_control_ID: This 128-bit field identifies the entity that is the single point of control. This is triggered 
by the condition single point of control = 1 in the incoming RMPl-MB granted to the receiving domain. 128-bit 
identifier to be allocated by compliance body. This condition is only applicable if RMPl_type_flag and 
single_point_of_control flag are set to 1 . 



RMPl-MB and RMPI-M lifecycle 



RMPI-MB is transmitted in conjunction with the broadcast signal. At the time of reception in the end user's TVA RMP 
Domain it is converted to RMPl-M. If RMPl-MB "scrambUng_control" is set to 1, then transition from RMPl-MB to 
RMPI-M must be synchronized with the rescrambling of the content. Rights that are granted to the "Receiving Domain" 
and "Single Point of Control" (if present) in RMPl-MB are carried over in RMPl-M. Generic mentioning of the 
"Receiving Domain" and "Single Point of Control" (if present) in RMPl-MB is translated into explicit mentioning 
through the explicit statement of "Identifiers" in RMPl-M. In order to maintain the persistence of the rights assigned by 
the broadcaster or content provider, a TVA RMP compliant receiver shall not change any other value in RMPI. Rights 
granted to "Any Domain" are always carried over unchanged from RMPI-MB to RMPI-M. Figure 2 illustrates the 
transition from RMPI-MB to RMPI-M in a case where "Single Point of Control" is asserted. 
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Figure 2: Transition from RIUIPI-IUIB to RIUIPI-IU! 
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Annex A (informative): 

XIVIL Expression of RIVIPI IVIB and IVI 



<?xnil version="1.0" encoding="UTF-8"?> 

<xs:schema targetNamespace="um:tva:rmpi:2004" xmlns:xs="http://www. w3.org/2001/XMLSchema" xmlns:rmpi="um:tva:rmpi:2004" 
xnilns:tva="urn:tva:metadata:2004" xmlns:mpeg7="urn:mpeg:mpeg7:schema:2001" elementForniDefault="qualified" 
attributeFormDef ault= " unqualified " > 

<!-- <xs:import namespace="um:mpeg:mpeg7:schema:2001" schemaLocation="./mpeg7_tva.xsd"/> — > 
<xs:annotation> 

<xs:documentation>TV-Anytime Forum (TVAF) Rights Management and Protection Information (RMPl) </xs:documentation> 
</xs:annotation> 

<xs:complexType name="RMPI-MBAndMType"> 
<xs:sequence> 

<xs:element name="AncillaryRMPI" type="rmpi:AncillaryRMPIType"/> 
<xs:element name="ExtendRights" type="rmpi:ExtendRightsType"/> 
<xs:element name="ReceivingDomainRights" type="rmpi:ReceivingDomainRightsType"/> 
<xs:element name="AnyDomainRights" type="rmpi:BasicContentRightsType"/> 
</xs:sequence> 
</xs:complexType> 

<xs:complexType name="ExtendRightsType"> 
<xs:sequence> 
<xs:choice> 

<xs:sequence> 

<xs:element name="ExtendRightsFlagGranted" type="rmpi:GrantedType"/> 
<xs:element name="SecurityLevel" type="rmpi:SecurityLevelType"/> 
<xs:element name="SourceOfAdditionalRights" type="xs:string"/> 
</xs:sequence> 

<xs:element name="ExtendRightsFlagNotGranted" type="rmpi:NotGrantedType"/> 
</xs:choice> 
</xs:sequence> 
</xs:complexType> 

<xs:simpleType name="SecurityLevelType"> 
<xs:restriction base="xs:string"> 

<xs:enumeration value="level 0"/> 
<xs:enumeration value="level 1 "/> 
<xs:enumeration value="level 2"/> 
<xs:enumeration value="level 3"/> 
</xs:restriction> 
</xs : simpleTypo 

<xs:simpleType name="GrantedNotGrantedType"> 
<xs:restriction base="xs:string"> 

<xs:enumeration value="granted"/> 
<xs:enumeration value="not granted"/> 
</xs:restriction> 
</xs : simpleTypo 

<xs:simpleType name="GrantedType"> 
<xs:restriction base="xs:string"> 

<xs : enumeration value= " granted "/> 
</xs:restriction> 
</xs : simpleTypo 

<xs:simpleType name="NotGrantedType"> 
<xs:restriction base="xs:string"> 

<xs:enumeration value="not granted"/> 
</xs:restriction> 
</xs : simpleTypo 

<xs:complexType name="BasicContentRightsType" abstract="true"> 
<xs:sequence> 

<xs:element name="PlayRightFlag" type="rmpi:GrantedNotGrantedType"/> 
<xs:element name="AnalogueExportRight" type="rmpi:AnalogueExportRightType"/> 
<xs:element name="DigitalExportSDRight" type="rmpi:DigitalExportRightType"/> 
<xs:element name="DigitalExportHDRight" type="rmpi:DigitaIExportRightType"/> 
<xs:element name="SecurityLevel" type="rmpi:SecurityLevelType"/> 
<xs:choice minOccurs="0"> 

<xs:element name="BufferDuration" type="rmpi:BufferDurationType"/> 
<xs:element name="TimeWindow" type="rmpi:TimeWindowType"/> 
</xs:choice> 
<xs:element name="GeographicalControl" type="xs:string"/> 
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<xs:element name="AnalogueExportSignalling" type="rmpi:SecurityLevelType"/> 
</xs:sequence> 
</xs:complexType> 

<xs : complexType name= ' ' AnalogueExportRightType ' ' > 
<xs:sequence> 
<xs:choice> 

<xs:element name="AnalogueExportRightFlagNotGranted" type="rmpi:NotGrantedType"/> 
<xs:sequence> 

<xs:element name="AnalogueExportRightFlagGranted" type="rmpi:GrantedType"/> 

<xs:element name="AnalogueExportSignalling" type="rmpi:AnalogueExportSignallingType" minOccurs="0"/> 
<xs:element name="AnalogueExportSDControl" type="rmpi:ControlType" minOccurs="0"/> 
</xs:sequence> 
</xs:choice> 
</xs:sequence> 
</xs:complexType> 
<xs:simpleType name="ControlType"> 
<xs:restriction base="xs:string"> 

<xs:enumeration value="controlled"/> 
</xs:restriction> 
</xs:simpleType> 

<xs:simpleType name="AnalogueExportSignallingType"> 
<xs:restriction base="xs:string"> 

<xs:enumeration value="immediate viewing"/> 
<xs:enumeration value="storage bound"/> 
</xs:restriction> 
</xs:simpleType> 

<xs:complexType name="DigitalExportRightType"> 
<xs:sequence> 
<xs:choice> 

<xs:element name="DigitalExportRightFlagNotGranted" type="rmpi:NotGrantedType"/> 
<xs:sequence> 

<xs:element name="DigitalExportRightFlagGranted" type="rmpi:GrantedType"/> 
<xs:element name="DigitalExportControl" type="rmpi:DigitalExportControlType" minOccurs="0"/> 
</xs:sequence> 
</xs:choice> 
</xs:sequence> 
</xs:complexType> 

<xs : simpleType name="DigitalExportControlType "> 
<xs:restriction base="xs:string"> 

<xs:enumeration value="immediate viewing"/> 
<xs:enumeration value="storage bound"/> 
<xs:enumeration value="RMP trusted"/> 
</xs:restriction> 
</xs : simpleType> 

<xs:simpleType name="BufferDurationType"> 
<xs:restriction base="xs:string"> 

<xs:enumeration value="immediate viewing"/> 
<xs:enumeration value="buffered viewmg"/> 
</xs:restriction> 
</xs:simpleType> 

<xs:complexType name="TimeWindowType"> 
<xs:sequence> 

<xs:element name="StartDate" type="rmpi:TVATimeType" minOccurs="0"/> 
<xs:element name="EndDate" type="rmpi:TVATimeType" minOccurs="0"/> 
</xs:sequence> 
</xs:complexType> 

<xs:complexType name="TVATimeType"> 
<xs:sequence> 

<xs:element name="TimePoint" type="mpeg7:timePointType"/> 
<xs:element name="Duration" type="mpeg7:durationType" minOccurs="0"/> 
</xs:sequence> 
</xs:complexType> 

<xs:complexType name="ReceivingDomainRightsType"> 
<xs:complexContent> 

<xs:extension base="rmpi:BasicContentRightsType"> 
<xs:sequence> 

<xs:element name="SinglePointOfControl" type="rmpi:SinglePointOfControlType" minOccurs="0"/> 
<xs:element name="PhysicalProximityFlag" type="rmpi:ControlType" minOccurs="0"/> 
<xs:element name="SimultaneousRendering" type="rmpi:SimultaneousRenderingType" minOccurs="0"/> 
<xs:element name="Domainld" type="xs:string" minOccurs="0"/> 
</xs:sequence> 
</xs:extension> 
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</xs:complexContent> 
</xs:complexType> 

<xs:complexType name="SinglePomtOfControlType"> 
<xs:sequence> 

<xs:element name="SinglePointOfControlFlag" type="rmpi:ControlType"/> 
<xs:element name="SinglePointOfControlId" type="xs:string" minOccurs="0"/> 
</xs:sequence> 
</xs:complexType> 

<xs:complexType name="SimultaneousRenderingType"> 
<xs:sequence> 

<xs:element name="SimultaneousRenderingFlag" type="rmpi:ControlType"/> 

<xs:element name="SimultaneousRenderingCount" type="rmpi:SimultaneousRenderingCountType"/> 
</xs:sequence> 
</xs:complexType> 

<xs:simpleType name="SimultaneousRenderingCountType"> 
<xs:restriction base="xs:integer"> 
<xs:minlnclusive value="l"/> 
<xs imaxinclusive value=" 1 5 "/> 
</xs:restriction> 
</xs:simpleType> 

<xs:complexType name="AncillaryRMPIType"> 
<xs:sequence> 

<xs:element name="RMPITypeFlag" type="rmpi:RMITypeFlagType"/> 
<xs:element name="VersionOfRMPI" type="xs:string"/> 
<xs:element name="OriginOfRMPI" type="xs:string"/> 
<xs:element name="Cipher" type="rmpi:CipherType"/> 
<xs:choice> 

<xs:element name="MBScramblingControl" type="nTipi:MBScramblingControlType"/> 
<xs:element name="MScramblingControl" type="rmpi:MScramblingControlType"/> 
</xs:choice> 
</xs:sequence> 
</xs:complexType> 

<xs:simpleType name="RMITypeFlagType"> 
<xs:restriction base="xs:string"> 

<xs:enumeration value="RMPI-MB"/> 
<xs:enumeration value="RMPI-M"/> 
</xs:restriction> 
</xs : simpleType> 

<xs:simpleType name="CipherType"> 
<xs:restriction base="xs:string"> 

<xs:enumeration value="no cipher"/> 
<xs:enumeration value="AES"/> 
<xs:enumeration value="CameIIia"/> 
<xs:enumeration value="DVB CSA l"/> 
<xs:enumeration value="DVB CSA 2"/> 
<xs:enumeration value="3DES"/> 
<xs:enumeration value="M2"/> 
<xs:enumeration value="out of RMP control"/> 
</xs:restriction> 
</xs:simpleType> 

<xs:simpleType name="MBScramblingControlType"> 
<xs:restriction base="xs:string"> 

<xs:enumeration value="maintain"/> 
<xs:enumeration value=" change "/> 
</xs:restriction> 
</xs:simpleType> 

<xs:simpleType name="MScramblingControlType"> 
<xs:restriction base="xs:strmg"> 

<xs:enumeration value="maintained"/> 
<xs:enumeration value="changed"/> 
</xs:restriction> 
</xs:simpleType> 
</xs:schema> 
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